Re: IBM Sterling Connect:Direct

Again, about running a MFT program on IBM i 7.1...
You might want to read the following
"Lack Of Ciphers In IBM i 7.1 Raises Concern"
https://www.itjungle.com/2017/02/01/lack-ciphers-ibm-7-1-raises-concern/

We use the MFT program GoAnywhere which uses it's own ciphers.
We do, however, tend to drop off old ciphers pretty rapidly. We have an
scanning service and if it sees that we use vulnerable ciphers we get
dinged on our security audit.

Does Sterling use it's own ciphers, or does it only use ciphers provided
by the OS?
I said before that, since they require that IBM's DCM be loaded on the
box, I seriously doubt they use their own ciphers.
Do you see anywhere in their announcements anything like "new ciphers
supported in 3.8"?
Do you see anything in their support documents on how to disable
vulnerable ciphers?

Rob Berendt